Report Overview
URL
hetron.net/auth/signin.php
Finishing URL
hetron.net/verify.php
IP / ASN
172.67.207.37
Title
Netflix
Phishing - Netflix
Detections
urlquery
2
Network Intrusion Detection
10
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
hetron.net 36 alert(s) on this Host | unknown | 2025-12-28 | 2026-06-01 | 2026-06-01 | 3.1 kB | 58 kB | 104.21.22.221 |   |
challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-05-31 | 5.5 kB | 896 kB | 104.18.95.41 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.PHP:8.3.30 (Programming languages)
PHP is a general-purpose scripting language used for web development.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 162.159.207.0 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request) | |
| low | 162.159.207.0 | Client IP | ET INFO Session Traversal Utilities for NAT (STUN Binding Response) | |
| low | Client IP | 162.159.207.0 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request) | |
| low | 162.159.207.0 | Client IP | ET INFO Session Traversal Utilities for NAT (STUN Binding Response) | |
| low | Client IP | 162.159.207.0 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request) | |
| low | 162.159.207.0 | Client IP | ET INFO Session Traversal Utilities for NAT (STUN Binding Response) | |
| low | Client IP | 162.159.207.0 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request) | |
| low | 162.159.207.0 | Client IP | ET INFO Session Traversal Utilities for NAT (STUN Binding Response) | |
| low | Client IP | 162.159.207.0 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request) | |
| low | 162.159.207.0 | Client IP | ET INFO Session Traversal Utilities for NAT (STUN Binding Response) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | hetron.net | malicious | Sinkholed |
| OpenDNS | hetron.net | phishing | Phishing Block |
| Cloudflare DNS | hetron.net | malicious | Sinkholed |
| DNS4EU | hetron.net | malicious | Sinkholed |
| Hagezi Threat Feed | hetron.net | malicious | Sinkholed |
JavaScript (73)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 086707e4369f60afedcafb16050a7618 | DocumentWrite | 39 B | 2023-03-07 | 2026-06-08 | |
Introduced by DocumentWrite First Seen 2023-03-07 Last Seen 2026-06-08 Times Seen 1011897 Size 39 B (39 bytes) MD5 086707e4369f60afedcafb16050a7618 SHA1 8216b0cc6876cbd44f01c158e7dff3833ceccd41 Loading... | |||||
HTTP Transactions (14)
| URL | IP | Response | Size |
|---|